Opened 9 years ago

Closed 4 years ago

#2837 closed defect (worksforme)

Torbutton's ‘banned ports’ make it detectable when off

Reported by: rransom Owned by:
Priority: High Milestone:
Component: Applications/Torbutton Version:
Severity: Keywords:
Cc: Actual Points:
Parent ID: Points:
Reviewer: Sponsor:

Description

Torbutton leaves ports 8118, 8123, 9050, and 9051 in Firefox's ‘banned ports’ list when it is disabled. A web server can use this fact to detect Torbutton's presence, even in non-Tor mode, by telling a user's browser to connect to it on multiple ports, including those ‘banned’ by Torbutton.

Child Tickets

Change History (5)

comment:1 Changed 9 years ago by mikeperry

Priority: normalmajor

comment:2 Changed 8 years ago by mikeperry

Owner: mikeperry deleted
Status: newassigned

comment:3 Changed 4 years ago by cypherpunks

this is irrelevant now that torbutton is only for use with tor browser, right?

comment:4 Changed 4 years ago by arma

Yes, I think so. I think this ticket is fine to close.

comment:5 Changed 4 years ago by gk

Resolution: worksforme
Status: assignedclosed

This is a relic of the toggle era and not an issue anymore.

Note: See TracTickets for help on using tickets.